0505-0738P 



ELECTRONIC DATA MANAGEMENT SYSTEM AND METHOD 



BACKGROUND OF THE INVENTION 
Field of the Invention 

This invention relates to an electronic data management system and method, 
and more particularly relates to an electronic data management system and method 
capable of determining the authenticity of electronic data. 

Description of Background Art 

When a customer places an order with a manufacturer, products different 
from a drawing submitted with the order may be delivered. Particularly, when 
electronic (numerical) data is submitted as the drawings for the ordered products, the 
following reasons can cause deficient products. 

1. A manufacturer has made a mistake in the process of manufacturing the 
products. 

2. A manufacturer has altered the drawings and then manufactured the 
products according to the altered drawings. 

3. A customer has altered the drawings after placing the order. 

Whether or not an electronic drawing is altered can be determined by 
installing an authentication system into both the customer's and manufacturer's 
computer systems. 

An authentication system, for example, as disclosed in Japanese Patent 
Publication Laid-open No. Hei. 9-198437, is designed to be capable of determining 
whether or not the electronic document is altered according to authentication 
information recorded within the electronic document (i.e. electronic drawing) and 
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authentication information recorded in the computers of both the customer and the 
manufacturer. 

However, with the authentication system described above, each time an 
authentication is executed at each computer system, the authentication information is 
5 required to be recorded in a computer and within an electronic document, and the 
authentication process therefore becomes complicated. 

And as this authentication system requires the installation of management 
functions to record the authentication information in each computer, the configuration 
of the computer system becomes complicated. 
10 Moreover, this authentication system has difficulty in determining which 

customer or manufacturer has altered an electronic document in cases where an 
electronic document is altered after authentication. Therefore, it has been difficult to 
specify the reasons 1 though 3 above in order to clarify exactly where the 
responsibility lies for a deficient product. 

1 5 SUMMARY AND OBJECTS OF THE INVENTION 

It is therefore an object of the present invention to set out to provide an 
electronic data management system and method capable of determining authenticity 
of electronic data accurately, and capable of specifying the computer system used in 
changing the electronic data in cases where electronic data is found to be not 

20 authenticated, while retaining a straightforward configuration. 

Here, a description is given with respect to the numerals shown in the 
attached drawings to enable ease of understanding. The content of this description is 
applicable to but not limited to the items to which numerals are attached. 

An electronic data management system related to the present invention (10) is 

25 an electronic data management system (10) for using electronic data mutually among 
a plurality of computer systems classified into at least two groups, wherein a reference 
characteristic value extracting means extracts a reference characteristic value (HI) 
from copied electronic data (B2(T)) to which a reference characteristic value (HI) 
calculated from an original electronic data (Al) is attached, comparison subject 
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characteristic value calculating means calculates comparison subject characteristic 
values (H2, H3) from the copied electronic data (B2) and/or electronic data (A2) 
recopied from the original electronic data (Al), and determining means (26) compares 
the reference characteristic value (HI) with the comparison subject characteristic 
5 values (H2, H3) then determines the authentication of the copied electronic data (B2) 
and/or the recopied electronic data (A2). 

In this case, the authentication of the copied electronic data (B2) and/or the 
recopied electronic data (A2) can be determined by comparing a reference 
characteristic value (HI) attached to copied electronic data (B2(T)) with comparison 
10 subject characteristic values (H2, H3) calculated from copied electronic data (B2) 
and/or recopied electronic data (A2) with this electronic data management system 
(10). Therefore the authentication of the copied electronic data (B2) and/or the 
recopied electronic data (A2) can be managed securely, and the system configuration 
can be even more extensively simplified compared to the system with the 
15 authentication management functions, etc. installed in each computer system. 

The computer systems above are classified into a management computer 
system (12) in which the reference characteristic value extracting means, the 
comparison subject characteristic value calculating means, and the determination 
means are installed, and a managed computer system (14) is provided which does not 
20 belong to the management computer system (12). Sources of the copied electronic 
data (B2) and/or the recopied electronic data are managed in the management 
computer system (12). 

Therefore in the case where the copied electronic data (B2) and/or the 
recopied electronic data (A2) are not authenticated according to sources of the copied 
25 electronic data (B2) and/or the recopied electronic data (A2), one of the management 
computer system (12) or the managed computer system (14) is used in changing the 
electronic data. 

In this case, the management computer system (12) can also be provided with 
reference characteristic value attaching means (22), that attaches the reference 
30 characteristic value (HI) calculated from the original electronic data (Al) to the 
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original electronic data (Al). 

Each item of electronic data (Al, A2, B2) is electronic drawing data, and 
each characteristic value (HI, H2, H3) can be provided as a hash value calculated 
from graphic information included in each item of electronic drawing data. 
5 The management computer system (12) is a customer's computer system for 

placing orders for products based on electronic drawing data provided as the original 
electronic data (Al). The managed computer system (14) is a manufacturer's computer 
system for manufacturing products for which an order was placed by the customer's 
computer system (12) and for delivering the manufactured products (M). The 

10 managed computer system (14) is a manufacturer's computer system for 
manufacturing products for which an order is placed by the customer's computer 
system (12) and for delivering the manufactured products (M). The customer 
computer system (12) includes means for determining whether or not the products (M) 
and electronic drawing data (A2, B2) correspond to each other by comparing the 

15 recopied electronic data (A2) outputted from the customer computer system (12) 
and/or the electronic drawing data provided as copied electronic data (B2) outputted 
from the manufacturer computer system (14) and the products (M) delivered from the 
manufacturer computer system (14). 

Therefore whether or not the products (M) are defective can be managed 

20 securely in the customer computer system (12). 

The reference characteristic value (HI) is encrypted or processed by 
electronic water-mark technology and embedded in the electronic data (A1(T), 
B2(T)). Therefore no computer system other than the specified computer systems 
(management computer system (12), customer computer system (12)) can change the 

25 content of the reference characteristic value (HI) and the authenticity of the copied 
electronic data (B2) and/or the recopied electronic data (A2) can therefore be 
managed securely. 

An electronic data management method of the present invention is an 
electronic data management method for storing original data at the customer computer 
30 system (12) and outputting the original electronic data (Al) as drawing data for the 
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ordered products to a manufacturer computer system (14) comprises a process for 
outputting the original electronic drawing data (A1(T1)) with an attached reference 
characteristic value (HI) previously calculated from the graphic information of the 
original electronic drawing data (Al), a process for extracting the reference 
characteristic value (HI) from the copied electronic drawing data (A1(T1)) of the 
original electronic drawing data (A1(T)), a process for calculating reference 
characteristic value (H2) from the stored graphic information of the recopied 
electronic drawing data (A2) of the original electronic drawing data (Al), and a 
process for determining whether or not either of the copied electronic drawing data 
(B2) or the recopied electronic drawing data (A2) is altered by comparing the 
reference characteristic value (HI) with the comparison subject characteristic value 
(H2). 

Therefore the authenticity of the copied electronic drawing data (B2) and the 
recopied electronic drawing data (A2) can be managed securely, and the electronic 
data management method with simplified configuration will be available. 

Further scope of applicability of the present invention will become apparent 
from the detailed description given hereinafter. However, it should be understood that 
the detailed description and specific examples, while indicating preferred embodiments 
of the invention, are given by way of illustration only, since various changes and 
modifications within the spirit and scope of the invention will become apparent to those 
skilled in the art from this detailed description. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention will become more fully understood from the detailed 
description given hereinbelow and the accompanying drawings which are given by way 
of illustration only, and thus are not limitative of the present invention, and wherein: 

FIG. 1 is a block view of a configuration for an electronic data management 
system of a first embodiment of the present invention; 

FIG. 2 is a block diagram of a configuration of a drawing output processor; 

FIG. 3 is a flowchart showing a determination process executed in an 
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inspection unit constituting the electronic data management system described in FIG. 
1, for determining whether or not a product is defective; 

FIG. 4 is a flowchart showing a determination process executed in a 
determination unit constituting the electronic data management system described in 
5 FIG. 1, for determining whether or not the content of the electric drawing data has 
been changed; and 

FIG. 5 is a flowchart showing a determination process executed in a 
determination unit constituting the electronic data management system described in 
FIG. 1, for determining whether or not the content of the electric drawing data has 
10 been changed. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
The following is a description with reference to the drawings of the preferred 
embodiments of the present invention. FIG. 1 is a block view of a configuration for 
an electronic data management system (10) of a first embodiment of the present 
15 invention. 

The electronic data management system 10 is for using electronic drawing 
data as electronic data mutually at a customer side and at manufacturer side, and 
comprises the customer computer system 12 on the customer side and the 
manufacturer computer system 14 on the manufacturer side. The customer computer 
20 system 12 and manufacturer computer system 14 can be configured with a plurality of 
computer systems. 

The customer computer system 12 comprises a drawing production unit 16, a 
storage device (storage means) 18, an order placing unit 20, a drawing output 
processor (reference characteristic value attaching means) 22, an inspection unit 24, 
25 and a determination unit (reference characteristic value extracting means and 
determination means) 26. The manufacturer computer system 14 comprises an order 
receiving unit 30 and a manufacturing unit 32. 

The drawing production unit 16 of the customer computer system 12 
produces the drawing for the product being ordered, and outputs the produced 
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drawing to the storage device 1 8 as original electronic drawing data (hereafter referred 
simply as original data). The storage device 18 comprises storage media such as 
memory elements, a hard disk, or a laser disc and stores the original data Al 
calculated from the drawing production unit 16 in the storage media. Original data Al 
5 (T) with a tag T attached, as described later, can be stored in the storage device 18. 

The order placing unit 20 reads out the original data Al form the storage 
device 18, and outputs the original data Al to the drawing output processor 22 as the 
drawing for the product being ordered. 

FIG. 2 is a block diagram of a configuration for the drawing output processor 
10 22. The drawing output processor 22 comprises hash value calculation means 40, hash 
value encryption means 42, and tag attachment means 44. 

The original data Al outputted from the order placing unit 20 is supplied to 
the hash value calculation means and the tag attachment means 44. 

The hash value calculation means 40 calculates the reference hash value HI 
15 as a reference characteristic value from graphic information such as lines, points, 
dimensions, finish marks, etc., and management information such as the title of the 
drawing, name of the drafter, and revision date, etc. 

The hash value encryption means 42 encrypts the reference hash value HI 
calculated by the hash value calculation means 40, and calculates an encrypted 
20 reference hash value HI'. 

In this case, the encryption process is performed using encryption methods 
such as the methods employed by PGP (Pretty Good Privacy), etc. 

The hash value encryption means 42 encrypts the reference hash value HI 
calculated by the hash value calculation means 40, and calculates the encrypted 
25 reference hash value HI'. When "CATIA"(software from Dassault systems) is used for 
producing the drawings, the encrypted reference characteristic hash value HI' is 
preferably converted into hexadecimal numbers and capitalized, and then embedded 
in the original data Al in order to maintain compatibility with the functions of 
"CATIA". 

30 In this case, the reference hash value HI' included in the tag T is encrypted, 
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and the tag T is embedded in the original data Al after being processed with 
electronic water-mark technology (technology for embedding a water-mark into an 
original image, where a water-mark embedded in an original image is created in a 
manner which is indistinguishable with the naked eye from the original image), etc. It 
5 is therefore not possible for any system other than the drawing output processor 22 
and the determination unit 26 of the customer computer system 12 to confirm the 
existence of the tag T, or determine or change the content of the tag T. 

The tag attachment means 44 outputs the original data Al (T) including the 
tag T to the order receiving unit 30 of the manufacturer computer system 14 as 

10 drawing data for the product being ordered. Here, the character "(T)" describes that 
the tag T is embedded in the original data Al. 

As described in FIG. 1, when the order receiving unit 30 receives the original 
data Al (T) from the customer computer system 12, the order receiving unit 30 
determines the content of the original data Al (T) (the content of the order received), 

15 and outputs the copied electronic data Bl (T) (hereinafter referred as copied data on 
the manufacturer side) copied at the order receiving unit 30 to the manufacturing unit 
32. 

Regarding the possibility of the change of the content of the original data Al 
with the exception of the tag T made at the order receiving unit 30, the numeral used 
20 to describe the copied data on the manufacturer side outputted from the order 
receiving unit 30 will now be changed from "Al" to "Bl". Similarly, changes of "Al" 
to "A2", and "Bl" to "B2" will also be made. 

The numeral "A" describes that the source of the electronic drawing data is 
the customer computer system 12, and the numeral "B" describes that the source of 
25 the electronic drawing data is the manufacturer computer system 14. 

The manufacturing unit 32 manages the manufacture of the product (controls 
the production process) according to the copied data on the manufacturer side B 1 (T) 
outputted from the order receiving unit 30. 

Then the manufacturing unit 32 delivers the manufactured product M to the 
30 customer, and outputs the copied data on the manufacturer side B2 (T) copied from 
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the copied data on the manufacturer side Bl (T) used for the manufacturing of the 
product M to the inspection unit 24 of the customer computer system 12. 

When the inspection unit 24 receives the product M and the copied data on 
the manufacturer side B2 (T) from the manufacturer computer system 14, the 
inspection unit 24 outputs the command d that requires the supply of the electronic 
drawing data A2 (the recopied electronic drawing data (hereafter referred as copied 
data on the customer side) recopied from the original data by the customer), which 
corresponds to the product M and the copied data on the manufacturer side B2 (T). 

The copied data on the customer side A2 read out from the storage device 18 
according to the command d is transferred from the order placing unit 20 to the 
inspection unit 24. 

The inspection unit 24 then determines whether or not the product M is 
defective by comparing the copied data on the customer side A2 and the copied data 
on the manufacturer side B2 (T) outputted from the manufacturer computer system 14 
with the product M. 

In this case, the inspection unit 24 manages the source of the copied data on 
the customer side A2 and the copied data on the manufacturer side B2 (T). 

FIG. 3 is a flowchart showing a determination process executed in an 
inspection unit 24 for determining whether or not the product M is defective. 

In step S 11, the inspection unit 24 compares the copied data on the customer 
side A2 with the product M (A2=M?). 

In this step, the copied data on the customer side A2 and the product M are 
compared by utilizing the three-dimensional geometry measuring apparatus, for 
example, the apparatus for measuring the shape of the surface of the product M by 
scanning the surface of the product M with means such as an inspection needle, or 
laser beam, etc. 

When the copied data on the customer side A2 and the product M is 
confirmed to coincide in this step Sll (YES), the value of the flag Fa describing the 
condition of the product M in the step S12 is set to Fa=0 to show that the product M is 
not defective. 
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When the copied data on the customer side A2 and the product M is 
confirmed not to coincide in this step Sll (NO), the process proceeds to step S13. 

In step SI 3, the inspection unit 24 compares the copied data on the 
manufacturer side B2 (T) ( copied data B2 on the manufacturer side B2 practically) 
5 with the product M in a similar process executed in step Sll (B2=M?). 

When it is confirmed that the copied data on the manufacturer side B2(T) and 
the product M does not coincide in step SI 3 (NO), (i.e. the product M does not 
correspond to neither of the copied data on the customer side A2 nor the copied data 
on the manufacturer side B2(T)), the value of the flag Fa in the step S14 will be set as 
1 0 Fa=l to show that the product M is defective. 

When it is confirmed that the copied data on the manufacturer side B2(T) and 
the product M coincide in step S13 (YES), the value of the flag Fa in the step SI 5 is 
set as Fa=2 to show that whether or not the product M is defective has not yet been 
determined. 

15 When the processing of steps Sll to S15 is complete, the inspection unit 24 

supplies the value of the flag Fa that describes the condition of the product M, the 
copied data on the customer side A2, and the copied data on the manufacturer side 
B2(T) to the determination unit 26 as described in FIG. 1 . 

When the determination unit 26 receives the flag Fa from the inspection unit 

20 24, the copied data on the customer side A2 and the copied data B2 (T) on the 
manufacturer side, the determination unit 26 determines whether or not any changes 
are made on the contents of either of the copied data on the customer side A2 or the 
copied data on the manufacturer side B2 (T) as described in the flowchart shown in 
FIG. 4. 

25 In step S21, the determination unit 26 confirms whether or not the value of 

the flag Fa is set to Fa=2 showing that whether or not the product M is defective has 
not yet been determined. When the value of the flag Fa is set as Fa=2 (YES), the 
process proceeds to the next step S22, and when the flag Fa is not set as Fa=2 (i.e. 
Fa=0 or Fa=l) (NO), the process is forwarded to step S29 as described later. 

30 In the step S22, the determination unit 26 extracts the tag T attached by the 
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drawing output processor 22 from the copied data on the manufacturer side B2 (T). 

Then in step S23, the determination unit 26 extracts the encrypted reference hash 

value HI' from the tag T, proceeds to step S24, and decodes the reference hash value 

HI from the encrypted reference hash value HI', i.e. these processes executed in these 
5 steps S22 to S24 have the function of the reference characteristic value extracting 

means for extracting the reference hash value HI as the reference characteristic value 

from the copied data B2 on the customer side B2 (T). 

In the following step S25, the determination unit 26 calculates the hash value 

on the customer side H2 as a comparison subject characteristic value from the copied 
10 data on the customer side A2. i.e. the process executed in this step S25 has the 

function of the comparison subject characteristic value calculating means for 

calculating the hash value on the customer side H2 as the comparison subject 

characteristic value from the copied data on the customer side A2 for comparison with 

the reference hash value HI. 
15 In the following step S26, the determination unit 26 compares the reference 

hash value HI extracted in the step S24 with the hash value on the customer side H2 

calculated in step S25. 

When it is confirmed that the reference hash value HI and the hash value on 

the customer side H2 coincide in step S26 (YES), the value of the flag Fb describing 
20 the authenticity of the copied data on the customer side A2 and the copied data on the 

manufacturer side B2 (T) in the step S27 are set as Fb=l to show that changes were 

made on the copied data on the manufacturer side B2 (T). 

This result can be obtained as follows; when the reference hash value HI and 

the hash value on the customer side H2 coincide, the original data Al and the copied 
25 data on the customer side A2 can be determined to coincide. When the product M and 

the copied data on the manufacturer side B2 (T) coincide (step S14 in FIG. 3) when 

the product M and the copied data on the customer side A2 do not coincide (the step 

S12 in FIG. 3), the copied data on the manufacturer side B2 (T) is regarded to have 

been changed in the manufacturer computer system 14. 
30 When the reference hash value HI and the hash value on the customer side 
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H2 are confirmed not to coincide in step S26 (NO), the value of the flag Fb in the 
following step S28 is set to Fb=2 to show that changes were made to the copied data 
on the customer side A2. 

This result can be obtained as follows; when the reference hash value HI and 
5 the hash value on the customer side H2 do not coincide, for example, the original data 
Al (the copied data on the customer side A2) stored in the storage device 18 can be 
considered to have been changed, for example, by the drawing output processor 16 of 
the customer computer system 12. 

Therefore the process executed in the step S26 functions as a determination 
10 means for determining the authenticity of the copied data on the customer side A2 by 
comparing the reference hash value HI with the hash value on the customer side H2. 

In the following step S29, the determination unit 26 outputs information 
based on the value of the flag Fb set in steps S27 and S28 and the value of the flag Fa 
set by the inspection unit (the information such as whether or not the product M is 
15 defective, the copied data on the customer side A2 and the copied data on the 
manufacturer side B2 coincides with the original data Al (whether or not this data is 
authentic), and the source where the change has been made when the copied data on 
the customer side A2 and the copied data on the manufacturer side B2 are not 
authenticated) to the output device such as display device which doesn't show the 
20 drawing, and to a printer, etc. The output device outputs the information of the 
defectiveness of the product M, and the authenticity of each item of electronic 
drawing data Al , A2, Bl , B2, etc. 

Such a configuration can also be provided wherein the determination unit 26 
calculates the hash value of the copied data on the manufacturer side B2, and 
25 determines if any change has been made to the copied data on the manufacturer side 
B2 by comparing the hash value with the reference hash value HI (the reference hash 
value HI attached to the copied data on the manufacturer side B2) calculated in the 
step S24. The following is a detailed description of this process with reference to the 
flowchart shown in FIG. 5. 
30 The inspection unit 26 executes the similar process to the step S22 to S24 in 
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FIG. 4 in the step S31 to S33 (reference characteristic value extracting means). Thus 

the reference hash value HI will be extracted from the copied data on the 

manufacturer side B2 (T) and restored. 

Then, in step S34 (the comparison object original value calculating means), 
5 the determination unit 26 calculates the hash value on the manufacturer side H3 as the 

comparison object original value from the copied data on the manufacturer side B2 

(T). In this case, the determination unit 26 removes the tag T attached by the drawing 

output processor 22 from the copied data on the manufacturer side B2 (T), and 

calculates the hash value on the manufacturer side H3. 
10 In step S3 5 (the determination means), the determination unit 26 compares 

the reference hash value HI calculated in the step S33 with the hash value on the 

manufacturer side H3 calculated in step S34 (H1=H3?). 

When the reference hash value HI and the hash value on the manufacturer 

side H3 are confirmed to coincide in step S35 (YES), the value of the flag Fc in the 
15 following step S36 describing the authenticity of the copied data on the manufacturer 

side B2 is set as Fc=l to show that no changes have been made to the copied data on 

the manufacturer side B2. 

When it is confirmed that the reference hash value HI and the hash value on 

the manufacturer side H3 do not coincide in step S3 5 (NO), the value of the flag Fc in 
20 the following step 37 describing the authenticity of the copied data on the 

manufacturer side B2 is set as Fc=2 to show that changes are made to the copied data 

on the manufacturer side B2. 

Moreover, by executing the process of steps S25 to S28 in FIG. 4 after steps 

S36 or S37, whether or not the copied data has been changed on the customer side A2 
25 can also be determined. Therefore whether or not both/either of the copied data on the 

customer side A2 and/or the copied data on the manufacturer side B2 has/have been 

changed can be determined. 

The electronic data management system 10 in the embodiment of the present 

invention is therefore capable of determining the authenticity of copied data on the 
30 customer side A2 and the copied data B2 on the manufacturer side B2 by comparing 
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the reference hash value HI based on the original data Al attached to the copied data 
on the manufacturer side B2 (T) with the hash value on the customer side H2 
calculated from the copied data on the customer side A2 and the hash value on the 
manufacturer side H3 calculated from the copied data on the manufacturer side B2. 
5 Therefore the authenticity of the copied data on the customer side A2 and the copied 
data on the manufacturer side B2 can be managed securely. Moreover, the 
configuration can be drastically simplified compared to the system for example in 
which the authentication management functions are installed in each computer system 
(the computer system on the customer side 12 and the computer system on the 

10 manufacturer side 14). 

Further, as the sources of the copied data on the customer side A2 and the 
copied data on the manufacturer side B2 are managed in the computer system on the 
customer side 12, the computer system on the customer side 12 is capable of 
specifying in which of the computer system on the customer side 12 or the computer 

15 system on manufacture side 14 a change to the copied data on the customer side A2 
and the copied data on the manufacturer side B2 has been made. 

The reference hash value HI is encrypted and embedded in the original data 
Al as the tag T by use of the electronic water-mark technology, so that no system 
other than the computer system on the customer side 12 and especially the drawing 

20 output processor 22 and the determination unit 26, can confirm the existence of the 
tag T, or determine or change the contents of the tag T. Therefore the authenticity of 
the copied data on the customer side A2 and the copied data on the manufacturer side 
B2 can be managed securely. 

The electronic data management system 10 in the embodiment of the present 

25 invention can also be applied to electronic data management systems for managing 
various sorts of electronic data other than the electronic drawing data. 

The present invention enables the accurate determination of the authenticity 
of electronic data, and enables the computer system used in changing electronic data 
to be specified in cases where electronic data is found to be not authenticated, while 

30 retaining a simple configuration. 
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The invention being thus described, it will be obvious that the same may be 
varied in many ways. Such variations are not to be regarded as a departure from the 
spirit and scope of the invention, and all such modifications as would be obvious to one 
skilled in the art are intended to be included within the scope of the following claims. 



